Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/c2bc59fa49c4ae1655eaf5d9c2a6ec96c866196d.roa
File:                     c2bc59fa49c4ae1655eaf5d9c2a6ec96c866196d.roa (raw, json)
Hash identifier:          QvSPR+NTSZMABHBMCBnF7h6s5r1A8n8J5r3ejWKD1s4=
Subject key identifier:   35:C0:5D:31:B3:45:84:9F:F8:44:B1:D7:E6:40:18:AE:CF:07:DF:2B
Certificate issuer:       /CN=d5f5b360f6396f35cac76fe7727148af2ea950d9
Certificate serial:       0EA04A
Authority key identifier: 38:66:D1:54:E1:04:2B:B2:C3:11:22:39:6A:CB:0D:60:F0:7A:DD:C9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5f5b360f6396f35cac76fe7727148af2ea950d9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/c2bc59fa49c4ae1655eaf5d9c2a6ec96c866196d.roa
Signing time:             Wed 24 Mar 2021 14:29:30 +0000
ROA not before:           Wed 24 Mar 2021 14:29:26 +0000
ROA not after:            Tue 24 Mar 2026 14:29:26 +0000
asID:                     52323
IP address blocks:        181.16.208.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 958538 (0xea04a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5f5b360f6396f35cac76fe7727148af2ea950d9
        Validity
            Not Before: Mar 24 14:29:26 2021 GMT
            Not After : Mar 24 14:29:26 2026 GMT
        Subject: CN=c2bc59fa49c4ae1655eaf5d9c2a6ec96c866196d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:02:a3:5e:f6:7b:c6:56:2a:ce:8a:b0:11:77:
                    3c:b8:3a:50:ca:c6:27:5a:5a:a7:0c:3a:5e:a1:80:
                    f0:51:28:b5:ca:71:10:91:a2:81:0f:6b:3a:b0:5e:
                    da:15:44:99:b7:5d:92:5c:56:20:13:68:0d:29:13:
                    71:cf:19:90:79:07:bb:8b:3b:f5:67:56:42:e0:8b:
                    81:81:89:f9:99:d7:81:31:ed:89:0d:5c:65:cb:90:
                    a2:c3:58:2b:b0:e4:88:4f:46:51:e6:8d:4d:8e:26:
                    c3:14:84:92:10:73:17:62:f8:92:0f:29:93:d0:24:
                    7d:39:ea:10:1c:cb:94:e2:1f:21:d3:4f:93:45:9a:
                    de:f8:f1:75:22:b0:d6:f3:3c:b4:d3:28:6f:23:63:
                    32:52:71:40:b0:21:0e:35:7a:f0:cb:06:dd:85:94:
                    50:ac:07:12:a2:a7:fe:f2:ec:7e:e0:e0:8f:bb:2a:
                    ba:e3:19:66:3e:d7:65:76:5e:be:f1:57:04:25:94:
                    9a:8b:b2:d9:fa:3e:3d:0e:d9:b3:0d:d6:e3:ad:54:
                    59:0c:1e:ae:c8:4f:87:82:c0:7c:a4:16:57:45:8a:
                    3a:75:5d:10:85:49:c0:59:22:cb:7b:73:44:f5:43:
                    40:0e:be:c3:ca:67:80:12:30:57:7b:8f:ab:22:5d:
                    e2:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:C0:5D:31:B3:45:84:9F:F8:44:B1:D7:E6:40:18:AE:CF:07:DF:2B
            X509v3 Authority Key Identifier:
                keyid:38:66:D1:54:E1:04:2B:B2:C3:11:22:39:6A:CB:0D:60:F0:7A:DD:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5f5b360f6396f35cac76fe7727148af2ea950d9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/c2bc59fa49c4ae1655eaf5d9c2a6ec96c866196d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/d5f5b360f6396f35cac76fe7727148af2ea950d9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.16.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         29:6e:2e:fa:cc:e5:f8:74:e4:b3:ae:a1:96:63:4c:12:2b:ca:
         2d:14:02:72:9d:b6:5d:65:b7:7b:5c:50:ba:af:a0:36:f0:26:
         1f:3b:51:89:36:33:58:4c:32:c7:12:2e:bd:22:07:4b:8b:08:
         df:fe:1f:1e:bd:c9:ae:ff:95:7c:7f:9e:6a:c7:c3:34:93:0d:
         ff:c7:1b:d9:9a:0d:7f:02:ee:ae:57:e4:ac:11:93:14:f4:34:
         aa:3a:47:8a:4f:a1:d7:a5:32:ac:15:d8:0d:19:c4:ef:dc:87:
         98:0c:de:41:7a:1a:d5:f4:79:2c:33:dc:b0:5b:e5:47:21:1d:
         04:34:79:a6:d8:a8:d1:41:2d:24:4d:6a:e3:d2:c8:74:23:bb:
         c5:d1:2a:5d:7b:b6:ac:a0:b7:a8:67:5e:ae:2d:98:27:dc:9d:
         c2:cc:11:2d:09:17:61:67:f2:74:b3:cc:32:8c:3c:65:3d:ee:
         c6:e3:63:12:ab:0b:37:d6:74:59:19:b0:ee:e3:13:b1:c2:28:
         96:b0:64:3f:de:af:a0:f3:6b:cc:86:bd:12:cd:90:c3:72:0b:
         f3:91:b4:65:0b:2a:25:a2:af:94:e5:52:ab:c6:e9:23:52:3c:
         eb:ab:b5:d2:54:e2:91:44:a3:18:58:2a:08:17:82:eb:56:3a:
         69:b6:c3:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----